300-320 Exam Questions
715 real 300-320 exam questions with expert-verified answers and explanations. Page 9 of 15.
- Question #416Advanced Addressing and Routing Solutions
Which two values does EIGRP use to calculate the metric of a route in a converged EIGRP topology (choose two):
EIGRProuting metricbandwidthdelay - Question #417Security Services
Which ASA to action with Web traffic to treat both HTTP and HTTPS for local internet proxy?
ASAWCCPWSAweb proxy - Question #418Advanced Addressing and Routing Solutions
Which are the Two PIM Bidirectional multicast features?
PIM Bidirectionalmulticastshared treemany-to-many - Question #419Advanced WAN Services
Why IP MPLS has preference compared to VRF-Lite over WAN?
MPLSVRF-LiteWAN designOpEx comparison - Question #420Advanced Addressing and Routing Solutions
A company wants to configure BGP on a router so that other BGP neighbors cannot influence the path of a particular route .which action must be taken to accomplish this configuratio...
BGPlocal preferencepath selectionrouting policy - Question #421Advanced Data Center Networks
One-to-one ratio mapping for access switches close to servers.
ToREoRdata center designaccess layer topology - Question #422Advanced Data Center Networks
An engineering team must allow communications between a new two-tier application in a Cisco Application-Centric Infrastructure environment. Which two elements must be configured to...
Cisco ACIendpoint groupscontractsfilters - Question #423Advanced Addressing and Routing Solutions
What is the characteristic of bidirectional PIM?
PIM Bidirectionalshared treemulticastRP - Question #425Security Services
An engineer is designing a multitenant network that requires separate management access and must share a single physical firewall. Which two features support this design? (Choose 2...
multitenant firewallfirewall virtualizationsite-to-site VPNshared infrastructure - Question #426Security Services
When adding an IPSec headend termination device to your network design, which two performance indicators are the most accurate to determine device scalability? (Choose two.)
IPSecVPN headendscalabilitytunnel termination - Question #427Advanced Enterprise Campus Networks
An engineer has been asked to design a LAN topology with high Availability and the loop-free features of STP. It must also support Etherchannel between multiple chassis and a separ...
vPCvirtual port channelEtherChannelmultichassis high availability - Question #428Advanced Enterprise Campus Networks
Refer to the exhibit. A customer discovers router R1 remains active even when R1 uplink (F0/1) is down. Which two commands can be applied to R1 to allow R2 to take over as the HSRP...
HSRPobject trackingfirst-hop redundancyfailover - Question #429Security Services
The network engineering team for a large university must increase the security within the core of the network by ensuring that IP traffic only originates from a network segment tha...
uRPFunicast reverse path forwardingIP spoofing preventioncampus security - Question #430Advanced Addressing and Routing Solutions
An engineer is working for a large scale cable TV provider that requires multicast on multisourced streaming video, but must not use any rendezvous point mechanism. Which multicast...
PIM-SSMmulticastsource-specific multicastno RP - Question #431Advanced Enterprise Campus Networks
An engineer is considering uplink bandwidth over-subscription in a Layer 3 network design. Which option is the Cisco recommended over-subscription ratio for uplinks between the dis...
over-subscription ratiodistribution to coreuplink designbandwidth planning - Question #432Advanced Enterprise Campus Networks
Refer to the exhibit. An engineer must provide a redesign for the distribution and access layers of the network. Which correction allows for a more efficient design?
HSRPdistribution layercampus redesignnetwork redundancy - Question #433Security Services
A network consultant is designing an Internet Edge solution and is providing the details around the flows supporting a local Internet Proxy. How is on-premises web filtering suppor...
web filteringWSAWCCPInternet Edge - Question #434Advanced WAN Services
A network engineer must reduce the security risks on a BGP network. Which option helps to avoid rogue route injection, unwanted peering, and malicious BGP activities?
BGP securityMD5 authenticationroute injectionBGP peering - Question #435Security Services
A network consultant is designing an enterprise network that includes an IPsec headend termination device. Which two capabilities are the most important to consider when assessing...
IPSec headendVPN scalabilitytunnel aggregationpackets per second - Question #436Advanced WAN Services
When a site has Internet connectivity with two different ISP's, which two strategies are recommended to avoid becoming a BGP transit site? (Choose two.)
BGP transitdual ISProute filteringBGP design - Question #437Advanced Enterprise Campus Networks
An engineer is designing a Layer 3-enabled access layer. Which design recommendation must the engineer consider when deploying EIGRP routing within the access layer?
EIGRP stubLayer 3 accessaccess layer designEIGRP routing - Question #438Advanced Data Center Networks
The Cisco ACI fabric consists of which design at the physical layer?
Cisco ACIspine-and-leafdata center fabricphysical topology - Question #439Advanced Addressing and Routing Solutions
What is the result of a successful RFP check?
uRPFreverse path forwardingpacket forwardingspoofing prevention - Question #440Advanced Enterprise Campus Networks
When you configure a multichassis setup with VSS, which link must be configured to extend the backplane between the two switches?
VSSVSLmultichassisvirtual switch - Question #441Advanced Enterprise Campus Networks
An engineer is designing a network using RSTP. Several devices on the network support only legacy STP. Which outcome occurs?
RSTPSTP interoperabilityconvergencelegacy STP - Question #442Advanced Data Center Networks
Which security function is inherent in an Application Centric Infrastructure network?
ACIdefault denialEPG segmentationmicrosegmentation - Question #443Advanced Addressing and Routing Solutions
How does stub routing affect transit routes in EIGRP?
EIGRP stub routingtransit routeshub-and-spokeroute filtering - Question #444Security Services
A customer would like to implement a firewall to secure an enterprise network. However, the customer is unable to allocate any new subnets. What type of firewall mode must be imple...
transparent firewallASA modesfirewall designLayer 2 firewall - Question #445Advanced WAN Services
A network engineer must use an Internet connection to provide backup connectivity between two sites. The backup connection must be encrypted and support multicast. Which technology...
GRE over IPsecmulticast VPNWAN backuptunnel encryption - Question #446Advanced Enterprise Campus Networks
Refer to the exhibit. A customer wants to use HSRP as a First Hop Redundancy Protocol. Both routers are currently running and all interfaces are active. Which factor determines whi...
HSRPFHRPactive router electionfirst hop redundancy - Question #447Advanced Data Center Networks
At which layer in the ACI fabric are policies enforced?
ACI leaf nodepolicy enforcementfabric architectureAPIC - Question #448Advanced Enterprise Campus Networks
Where should loop guard the implemented in a campus network design?
loop guardSTP port rolescampus STP designalternate ports - Question #449Advanced Addressing and Routing Solutions
Refer to the exhibit. An engineer must apply IP addressing to five new WAN sites and choses the new subnets pictured. The previous administrator applied the addressing at Headquart...
IP summarizationVLSMWAN addressingsubnet calculation - Question #450Security Services
Which two options are features of a scalable cluster design utilizing Cisco ASA firewalls? (Choose two)
ASA clusteringfirewall scalabilityaggregate throughputcluster design - Question #451Security Services
Which action should be taken when implementing a preferred IPS design?
IPS designmanagement interfaceVLAN isolationsecurity best practices - Question #452Advanced Data Center Networks
How does OTV provide STP isolation?
OTVSTP isolationBPDU filteringdata center interconnect - Question #453Advanced Enterprise Campus Networks
A LAN infrastructure consists of switches from multiple vendors. Spanning Tree is used as a Layer 2 loop prevention mechanism. All configured VLANs must be grouped in two STP insta...
MSTPSTP instancesVLAN groupingstandards-based STP - Question #454Advanced Addressing and Routing Solutions
An engineer is working on an OSPF network design and wants to minimize the failure detection time and the impact on the router CPU. Witch technology accomplishes this goal?
BFDOSPF failure detectionfast convergenceCPU optimization - Question #455Advanced Enterprise Campus Networks
An engineer wants to assure that host can locate routers that can be used as a gateway to reach IP-based devices on other networks. Which first hop redundancy protocol accomplishes...
IRDPFHRPgateway discoveryfirst hop redundancy - Question #456Security Services
What added enforcement feature is available on IDS-based devices to terminate active malicious traffic?
IDSTCP resetintrusion detectionmalicious traffic termination - Question #457Advanced Addressing and Routing Solutions
An CSPF router should have a maximum of how many adjacent neighbors?
OSPFCSPFadjacency limitrouting scalability - Question #458Advanced Enterprise Campus Networks
While configuring a QoS policy, analysis of the switching infrastructure indicates that the switches support 1P3Q3T egress queuing. Which option describes the egress queuing in the...
QoSegress queuing1P3Q3Tpriority queue - Question #459Advanced Enterprise Campus Networks
An engineer is redesigning the infrastructure for a campus environment. The engineer must maximize the use of the links between the core and distribution layers. By which two metho...
ECMPcore-distribution designLayer 3 campuslink utilization - Question #460Security Services
Which two characteristics of the 802.1X standard are true? (Choose two.)
802.1XEAPIEEE standardport authentication - Question #461Advanced Addressing and Routing Solutions
An engineer must create this design: - Restrict certain networks from being advertised to remote branches connected via eBGP. - Prohibit advertisement of the specific prefix to ext...
BGP communitiesno-exporteBGProute filtering - Question #462Advanced WAN Services
An engineer must optimize a single-homed connection in a small branch office. Which technology accomplishes this goal?
WAN optimizationWAEbranch officesingle-homed - Question #463Advanced WAN Services
An engineer is designing a redundant dual-homed BGP solution that should prefer one specific carrier under normal conditions. Traffic should automatically fail over to a secondary...
BGPAS-PATHMEDinbound traffic engineering - Question #464Advanced WAN Services
A large scale IP SLA deployment is causing memory and CPU shortages on the routers in an enterprise network. Which solution can be implemented to mitigate these issues?
IP SLAshadow routerCPU optimizationscalability - Question #465Security Services
An engineering team must design a firewall solution with shared hardware resources but separation of features such as ACLs, NATs, and management between the external business partn...
ASAmulticontext modefirewall virtualizationsecurity contexts - Question #466Advanced Data Center Networks
A network team is designing a Layer 3 Data Center Interconnect between two data centers. There is a requirement for all links of equal bandwidth be utilized have automatic failover...
ECMPLayer 3 DCIload balancingdata center interconnect