300-420 Exam Questions
421 real 300-420 exam questions with expert-verified answers and explanations. Page 6 of 9.
- Question #253Advanced Addressing and Routing Solutions
An engineer is designing a BGP solution supporting a VXLAN environment over a Layer 3 IPv4 network fabric with these requirements: - provide Layer 2 adjacency - allow VM migration...
BGP EVPNVXLANLayer 2 VPNData Center Interconnect - Question #254Advanced Enterprise Campus Networks
Which protocol is deployed through LAN automation to build node-to-node underlay adjacencies in SDA?
SDALAN AutomationIS-ISUnderlay Adjacencies - Question #255Advanced Addressing and Routing Solutions
Refer to the exhibit. A customer requires maximum uptime for the data plane between R1 and R3 running OSPF. Which solution must the design include for high availability if the rout...
OSPF High AvailabilityGraceful RestartData Plane ResilienceControl Plane Resilience - Question #256Advanced Addressing and Routing Solutions
Refer to the exhibit. A customer has two eBGP peerings from a single CE router toward two service providers. The customer has hired an architect to design a solution to ensure cert...
BGP RoutingTraffic EngineeringInbound Traffic ControlPrefix-specific Routing - Question #257Advanced Enterprise Campus Networks
Which control plane protocol is responsible for EID-to-RLOC mapping concerning SD-Access Architecture?
SD-AccessLISPControl PlaneEID-to-RLOC mapping - Question #258Advanced Enterprise Campus Networks
An engineer is designing a campus network with Cisco Catalyst 9500 switches in the aggregation layer. The design requires running nonblocking Layer 2 MEC from the aggregation layer...
StackWise VirtualCisco Catalyst 9500Multi-chassis EtherChannelNetwork High Availability - Question #259Advanced Enterprise Campus Networks
Which feature provides the capability for intra-VN traffic filtering and control within the Cisco SD- Access architecture?
SD-AccessMicro-segmentationScalable GroupsSecurity Policy - Question #260Advanced Enterprise Campus Networks
Refer to the exhibit. An engineer working for a telecommunication company with an employee ID: 1234:56:789 is calculating STP scalability for switches to ensure that the numbers ar...
STPPVST+Logical PortsSwitching Scalability - Question #261WAN for Enterprise Networks
Prior to establishing full-mesh IPsec tunnels in a typical Cisco SD-WAN deployment, which mechanism do WAN Edge routers use to exchange key information for data plane encryption?
Cisco SD-WANIPsecKey ExchangevSmart Controller - Question #262WAN for Enterprise Networks
Which feature minimizes TLOC connections and reduces strain on the vSmart controller in an SD-WAN architecture?
SD-WANvSmart controllerTLOC affinityControl plane optimization - Question #263Advanced Addressing and Routing Solutions
Refer to the exhibit. A network administrator plans to announce the site subnets to the WAN using route summarization instead of announcing every subnet. What is the smallest summa...
IPv6Route SummarizationNetwork AggregationWAN Routing Optimization - Question #264Advanced Addressing and Routing Solutions
Refer to the exhibit. A customer is planning to onboard three new VPN partner connections in the data center. The new subnets must not overlap with the existing data center network...
SubnettingIP AddressingNetwork DesignVLSM - Question #265WAN for Enterprise Networks
An engineer is designing a WAN solution for a customer with teams in different branch locations that need to communicate. The teams also need to access enterprise applications host...
MPLS L3 VPNVRFWAN DesignNetwork Segmentation - Question #266Advanced Addressing and Routing Solutions
In a multicast network, which condition must be met for an RPF check to be performed on the RP address?
Multicast RoutingPIM Sparse ModeRPF CheckRendezvous Point - Question #267Automation
How do IETF, OpenConfig, and Cisco native YANG models differ when used to configure the same feature on an infrastructure device?
YANG modelsOpenConfigIETF YANGNetwork Automation - Question #268Advanced Enterprise Campus Networks
Drag and Drop Question Drag and drop the descriptions from the left onto the categories they apply to on the right. Answer:
Network DesignEnterprise ArchitectureComponent Characteristics - Question #269WAN for Enterprise Networks
Which protocol runs between the vSmart controllers and between the vSmart controllers and the vEdge routers, and unifies all control plane functions under a single protocol umbrell...
Cisco SD-WANOMPControl PlaneSD-WAN Architecture - Question #270WAN for Enterprise Networks
Which two statements regarding Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two.)
SD-WAN SecurityDoS MitigationStateful FirewallControl Plane Security - Question #271WAN for Enterprise Networks
Which is a benefit of a cloud-based SD-WAN deployment?
SD-WANCloud deploymentScalability - Question #272Network Services
Which Cisco product were incorporated into Cisco ISE between ISE releases 2.0 and 2.3?
Cisco ISECisco ACSProduct IntegrationNetwork Access Control - Question #273Advanced Enterprise Campus Networks
Which Cisco product supports SD-Access and specifically built to address new challenges faced by enterprises?
SD-AccessCisco Catalyst 9500Enterprise NetworksCampus Networks - Question #274WAN for Enterprise Networks
Which Cisco vEdge router offers 20 Gb of encrypted throughput?
Cisco vEdgeSD-WANRouter performanceEncrypted throughput - Question #275WAN for Enterprise Networks
Which are the three focus areas for reinventing the WAN? (Choose three.)
WAN transformationSD-WAN principlesApplication QoECloud networking - Question #276WAN for Enterprise Networks
Which two statements are true regarding SD-WAN demonstrations? (Choose two.)
SD-WAN DemonstrationSales Engineering Best PracticesClient EngagementPresentation Skills - Question #277Network Services
Which two statements are true regarding Cisco ISE? (Choose two.)
Cisco ISEISE ArchitectureHigh AvailabilityScalability - Question #278Network Services
What are three ways in which Cisco ISE learns information about devices? (Choose three.)
Cisco ISEDevice ProfilingRADIUSNetwork Traffic Analysis - Question #279WAN for Enterprise Networks
Which element of the Cisco SD-WAN architecture facilitates the functions of controller discovery and NAT traversal?
Cisco SD-WANvBond orchestratorController discoveryNAT traversal - Question #280Advanced Enterprise Campus Networks
Which three ways are SD-Access and ACI Fabric similar? (Choose three.)
SD-AccessACINetwork OverlaysGroup-based Policy - Question #281Advanced Enterprise Campus Networks
Which is a function of the Proactive Insights feature of Cisco DNA Center Assurance?
Cisco DNA CenterNetwork AssuranceProactive MonitoringSynthetic Testing - Question #282Automation
Which option will help build your customers platform during the discovery phase?
Discovery PhaseProof of Value (POV)Solution SellingCustomer Engagement - Question #283Network Services
Which two Cisco ISE features provide benefits to our customers? (Choose two.)
Cisco ISENetwork Access ControlSecurityThreat Containment - Question #284Advanced Enterprise Campus Networks
Which two statements describes Cisco SD-Access? (Choose two.)
Cisco SD-AccessNetwork VirtualizationSegmentationOverlay Networking - Question #285Advanced Enterprise Campus Networks
Which two activities should occur during an SE's discovery process? (Choose two.)
Discovery ProcessSales Engineering (SE) RoleCustomer Needs AssessmentDesign Methodology - Question #286Advanced Enterprise Campus Networks
Which three key differentiators that DNA Assurance provides that our competitors are unable to match? (Choose three.)
Cisco DNA AssuranceNetwork ManagementSD-AccessNetwork Analytics - Question #287Automation
What are the three foundational elements required for the new operational paradigm? (Choose three.)
Network AutomationSDN ArchitectureNetwork FabricNetwork Assurance - Question #288Advanced Enterprise Campus Networks
Which two primary categories are displayed on the overall health page of the assurance component in the Cisco DNA Center? (Choose two.)
Cisco DNA CenterAssuranceNetwork MonitoringHealth Dashboard - Question #289Advanced Enterprise Campus Networks
Which are two advantages of a "one switch at a time" approach to integrating SD-Access into an existing brown field environment? (Choose two.)
SD-Access IntegrationBrownfield DeploymentNetwork MigrationPhased Rollout - Question #290Automation
Which three options focus of the current digital business era? (Choose three.)
Digital TransformationIoTAutomationVirtualized Services - Question #291Advanced Enterprise Campus Networks
What is the easiest way to enable SD-Access for all your remote sites after you have your campus SD-Access fabric up and running?
SD-Access ExtensionMulti-site FabricFabric UnderlayWAN Integration - Question #292Network Services
What should you do If you are looking at a strategic win with a customer and the customer wants to examine Cisco ISE for longer than a few weeks?
Customer engagementProduct evaluationCisco ISEProof of Value (POV) - Question #293Network Services
Which node enables Cisco ISE to share contextual information on a device with Cisco Stealthwatch?
Cisco ISEpXGridStealthwatch IntegrationSecurity Context - Question #294Network Services
Which two options are primary functions of Cisco ISE? (Choose two.)
Cisco ISENetwork SecurityEndpoint ComplianceNetwork Visibility - Question #295Network Services
Which two activities should occur during an SE's demo process? (Choose two.)
Sales EngineeringDemo ProcessCustomer Engagement - Question #296Network Services
Which two options help you sell Cisco ISE? (Choose two.)
Cisco ISENetwork Access ControlDevice ProfilingThird-party Integration - Question #297Advanced Enterprise Campus Networks
Which are two Cisco recommendations that demonstrates SDA? (Choose two.)
SDA PrinciplesDNA CenterSolution DemonstrationBusiness Value - Question #298WAN for Enterprise Networks
Which feature is supported on the Cisco vEdge platform?
SD-WANvEdgeIPv6WAN Transport - Question #299Automation and Artificial Intelligence
What statement is true regarding the current time in Enterprise Networking history?
Enterprise Networking TrendsTechnological EvolutionIndustry Overview - Question #300Network Services
Which two statements are true regarding Cisco ISE? (Choose two.)
Cisco ISENetwork Access ControlAAASD-Access - Question #301Network Services
How would Cisco ISE handle authentication for your printer that does not have a supplicant?
Cisco ISEMAC Authentication Bypass (MAB)Network Access ControlEndpoint Authentication - Question #302Advanced Enterprise Campus Networks
Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)
Cisco ISENetwork Access ControlSoftware-Defined AccessNetwork Segmentation