300-420 practice test

1. Question 1 · 1

   Which two BGP features will result in successful route exchanges between eBGP neighbors sharing the same AS number? (Choose two.)

   Choose all answers that apply.

   • advertise-best-external
   • bestpath as-path ignore
   • client-to-client reflection
   • as-override
   • allow-as-in

2. Question 2 · 1

   Refer to the exhibit. EIGRP has been configured on all links. The spoke nodes have been configured as EIGRP stubs, and the WAN links to R3 have higher bandwidth and lower delay than the WAN links to R4. When a link failure occurs at the R1-R2 link, what happens to traffic on R1 that is destined for a subnet attached to R2?

   Choose one answer.

   

   • R1 has no route to R2 and drops the traffic
   • R1 load-balances across the paths through R3 and R4 to reach R2
   • R1 forwards the traffic to R3, but R3 drops the traffic
   • R1 forwards the traffic to R3 in order to reach R2

3. Question 3 · 1

   An engineer is upgrading a company's main site to include a connection to a second ISP. The company will receive full Internet routing tables from both ISPs via BGP. The engineer must ensure that the company does not become a transit autonomous system. Which solution should be included in this design?

   Choose one answer.

   • Tag incoming routes from both ISPs with BGP community no-export.
   • Lower the MED for updates sent to the secondary ISP.
   • Use a route-map to prevent all prefixes from being advertised to either ISP.
   • Modify the local-preference for routes incoming from the primary ISP.

4. Question 4 · 1

   An architect is working on a design to connect a company's main site to several small to medium-sized remote branches. The solution must include redundant WAN links, but the customer has a limited budget and wants the ability to increase the link speed easily in the future. QoS will run on the branch routers, so there is no need for consistent end-to-end QoS. Which solution does the architect propose?

   Choose one answer.

   • dual-homed WAN MPLS with single-edge router
   • dual-homed Internet with a single-edge router running a site-to-site VPN topology
   • dual-homed WAN MPLS and Internet links via dual-edge routers
   • dual-homed Internet with dual-edge routers running a hub-and-spoke VPN topology

5. Question 5 · 1

   An engineer must design a solution to connect a customer to the Internet. The solution will include a Layer 3 circuit with a CIR of 50 Mbps from the service provider. The hand-off from the provider's switch to the customer's router is 1Gbps. Which solution should the engineer include to prevent potential issues with choppy voice traffic?

   Choose one answer.

   • Reduce the bandwidth of the connection to the router.
   • Implement hierarchical QoS with a parent policing policy.
   • Implement hierarchical QoS with a parent shaping policy.
   • Add a bandwidth statement to the router interface.

6. Question 6 · 1

   Refer to the exhibit. Customers report low video quality and delays when having point-to-point telepresence video calls between the two locations. An architect must optimize a design so that traffic follows the same path for egress and ingress traffic flows. Which technique optimizes the design?

   Choose one answer.

   

   • Configure route leaking on the router in area 2.
   • Configure route leaking on the router in area 1.
   • Configure the high metric on the router in area 4.
   • Configure route filter on the router in area 4.

7. Question 7 · 1

   Refer to the exhibit. An engineer is designing a BGP solution for a client that peers with ISP1 for full Internet connectivity and with ISP2 for direct exchange of routes for several third parties. Which action, when implemented on the edge routers, enables the client network to reach the Internet through ISP1?

   Choose one answer.

   

   • Run an eBGP session within different VRFs for each ISP.
   • Advertise a default route for downstream routers within the client network.
   • Apply the AS-path prepend feature for ISP2.
   • Apply route filtering such that the client advertises only routes originated from its own AS.

8. Question 8 · 1

   An engineer must propose a solution for a campus network that includes the capability to create multiple Layer 3 virtual networks. Each network must have its own addressing structure and routing table for data forwarding. The solution must be scalable to support hundreds of virtual networks and allow simple configuration and management with minimal administrative overhead. Which solution does the engineer recommend?

   Choose one answer.

   • hop-by-hop EVN
   • multihop MPLS core
   • multihop IPsec tunneling
   • hop-by-hop VRF-Lite

9. Question 9 · 1

   An engineer must design a VPN solution for a company that has multiple branches connecting to a main office. What are two advantages of using DMVPN instead of IPsec tunnels to accomplish this task? (Choose two.)

   Choose all answers that apply.

   • support for AES 256-bit encryption
   • greater scalability
   • support for anycast gateway
   • lower traffic overhead
   • dynamic spoke-to-spoke tunnels

10. Question 10 · 1

    How is Internet access provided to a WAN Edge router that is connected to a MPLS transport link?

    Choose one answer.

    • OMP advertises a default route from a WAN Edge router that is connected to the MPLS and Internet transport networks.
    • Internet access must be provided at the WAN Edge router through either a 4G/5G link or local Internet circuit.
    • An extranet must be provided in the MPLS transport network to allow private traffic to reach the public Internet.
    • TLOC extensions are used to route traffic to a WAN Edge router that is connected to the Internet transport network.

11. Question 11 · 1

    DRAG DROP - Drag and drop the elements from the left onto the functions they perform in the Cisco SD-WAN architecture on the right. Select and Place:

    Match each destination with an option.

    

    performs the initial authentication of WAN Edge devices

    • • vManage
    • • vSmart controller
    • • vBond orchestrator

    provides a GUI interface to monitor, configure, and maintain the SD-WAN devices

    • • vManage
    • • vSmart controller
    • • vBond orchestrator

    responsible for the control plane

    • • vManage
    • • vSmart controller
    • • vBond orchestrator

12. Question 12 · 1

    Which method does Cisco SD-WAN use to avoid fragmentation issues?

    Choose one answer.

    • PMTUD is used.
    • Access circuits are configured with 1600 byte MTU settings.
    • Jumbo frames are enabled.
    • Traffic is marked with the DF bit set.

13. Question 13 · 1

    A company is using OSPF between its HQ location and a branch office. HQ is assigned area 0 and the branch office is assigned area 1. The company purchases a second branch office, but due to circuit delays to HQ, it decides to connect the new branch office to the existing branch office as a temporary measure. The new branch office is assigned to area 2. Which OSPF configuration enables all three locations to exchange routes?

    Choose one answer.

    • The existing branch office must be configured as a stub area
    • A virtual link must be configured between the new branch office and HQ
    • A sham link must be configured between the new branch office and HQ
    • The new branch office must be configured as a stub area

14. Question 14 · 1

    DRAG DROP - Drag and drop the descriptions from the left onto the corresponding WAN connectivity types and categories on the right. Select and Place:

    Match each destination with an option.

    

    data security

    • • It supports end-to-end network segmentation.
    • • The WAN is a flat network with no network segmentation.
    • • Application data is encrypted end-to-end.
    • • It is hard to detect sniffing incidents.
    • • Control traffic is fully encrypted and independent from the service provider network.
    • • CE to PE routing is controlled by the service provider.

    network segmentation

    • • It supports end-to-end network segmentation.
    • • The WAN is a flat network with no network segmentation.
    • • Application data is encrypted end-to-end.
    • • It is hard to detect sniffing incidents.
    • • Control traffic is fully encrypted and independent from the service provider network.
    • • CE to PE routing is controlled by the service provider.

    routing exposure

    • • It supports end-to-end network segmentation.
    • • The WAN is a flat network with no network segmentation.
    • • Application data is encrypted end-to-end.
    • • It is hard to detect sniffing incidents.
    • • Control traffic is fully encrypted and independent from the service provider network.
    • • CE to PE routing is controlled by the service provider.

    data security

    • • It supports end-to-end network segmentation.
    • • The WAN is a flat network with no network segmentation.
    • • Application data is encrypted end-to-end.
    • • It is hard to detect sniffing incidents.
    • • Control traffic is fully encrypted and independent from the service provider network.
    • • CE to PE routing is controlled by the service provider.

    network segmentation

    • • It supports end-to-end network segmentation.
    • • The WAN is a flat network with no network segmentation.
    • • Application data is encrypted end-to-end.
    • • It is hard to detect sniffing incidents.
    • • Control traffic is fully encrypted and independent from the service provider network.
    • • CE to PE routing is controlled by the service provider.

    routing exposure

    • • It supports end-to-end network segmentation.
    • • The WAN is a flat network with no network segmentation.
    • • Application data is encrypted end-to-end.
    • • It is hard to detect sniffing incidents.
    • • Control traffic is fully encrypted and independent from the service provider network.
    • • CE to PE routing is controlled by the service provider.

15. Question 15 · 1

    A global organization with several branches hired a network architect to design an overlay VPN solution. The branches communicate with each other frequently. The customer expects to add more branches in the future. To meet the customer's security requirements, the architect plans to provide traffic protection using dynamic IPsec tunnels. Which solution should the architect choose?

    Choose one answer.

    • DMVPN
    • EasyVPN
    • L2TP
    • GETVPN

Paid access to all 265 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.