[Mar 29, 2026] Updates Up to 365 days On Valid 300-420 Braindumps
Best Quality300-420 Exam Questions Cisco Test To Gain Brilliante Result
NEW QUESTION # 139
Drag and drop the components in a Cisco SD-Access architecture from the left onto their descriptions on the right.
Answer:
Explanation:
NEW QUESTION # 140
Drag and drop the model-driven telemetry considerations from the left onto the modes they apply to on the right.
Answer:
Explanation:
Explanation:
https://xrdocs.io/telemetry/blogs/2017-01-20-model-driven-telemetry-dial-in-or-dial-out/
NEW QUESTION # 141
What is the purpose of a control plane node in a Cisco SD-Access network fabric?
- A. to maintain the endpoint database and mapping between endpoints and edge nodes
- B. to act as the network gateway between the network fabric and outside networks
- C. to identify and authenticate endpoints within the network fabric
- D. to detect endpoints in the fabric and inform the host tracking database of EID-to-fabric-edge node bindings
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html
NEW QUESTION # 142
An engineer must design a QoS solution for a customer that is connected to an ISP over a 1Gbps link with a
100Mbps CIR. The ISP aggressively drops all traffic received over which is causing numerous TCP retransmissions. The customer is not using any RTP applications but wants to maximize bandwidth usage up to the CIR. Which QoS solution engineer choose?
- A. Policing
- B. Traffic shaping
- C. Policer with markdown
- D. Queuing
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/quality-of-service-qos/qos-policing/19645-policevsshape.html
NEW QUESTION # 143
An engineer is designing an IPv4 addressing plan for an enterprise with 1000 branches. Each branch requires a prefix for data and a prefix for voice. Each prefix must accommodate up to 128 hosts, and prefixes must facilitate summarization at aggregation points in the network. The security team requires a simple method for identifying voce prefixes. Which allocation does the engineer recommend from the RFC1918 address space?
- A. /24 prefixes for data from 10.0.0.0/8 and /24 prefixes for voice from the next contiguous /24 prefix per site
- B. /24 prefixes for data from 10.0.0.0/15 and /24 prefixes for voice from 172.16.0.0/15
- C. /24 prefixes for data from 10.0.0.0/8 and /24 prefixes for voice from 172.16.0.0/12
- D. /25 prefixes for data from 10.0.0.0/8 end /25 prefixes for voice from the next contiguous /25 prefix per branch
Answer: A
NEW QUESTION # 144
A company uses cloud-based applications for voice and video calls, file sharing, content sharing, and messaging. During business hours, these applications randomly become slow and unresponsive. However, other applications work smoothly with the current applied QoS polices. Which solution must the company choose to resolve the issue?
- A. Identify the applications and reserve the required bandwidth on the perimeter routers.
- B. Identify the applications with NBAR2 and allocate the required bandwidth accordingly.
- C. Identify the application ports, create groupings, and rate-limit the required bandwidth.
- D. Identify the port used by each application and apply a minimum bandwidth guarantee.
Answer: B
Explanation:
using NBAR to identify application and bandwidth usage, then adjust existing QoS polices would be a more simple option. Of course, B is still ok if the network admin know all traffic and bandwidth consumption by other tools, say netflow. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/configuration/15-mt/qos-nbar-15-mt-book/nbar-protocl-discvry.html#GUID-ED1AEDA1-AE69-45C3-A77E-2AF881CA9C36
https://www.cisco.com/c/en/us/products/ios-nx-os-software/network-based-application-recognition-nbar/index.html
NEW QUESTION # 145
An architect must create a QoS solution for a customer to ensure that a 40 Mbps Internet connection is shared between four subnets based on these requirements:
* Each subnet must receive no less than 10 Mbps of download bandwidth during peak traffic times.
* A subnet can use up to 40 Mbps during nonpeak traffic times if the other subnets are idle.
* Download traffic must never experience a delay.
Which solution must the architect choose?
- A. bandwidth percentage and rate-limiting
- B. shaping and policing
- C. rate-limiting and shaping
- D. bandwidth percentage and policing
Answer: D
Explanation:
"Download traffic must never experience a delay."
This means we shouldn't be using Shaping at any point (since that puts packets into a buffer and sends them out later on when congestion has been reduced) Also: "Rate-limiting" is a bigger term and under it we have 2 things: "Policing" and "Shaping"
NEW QUESTION # 146
Which two statements regarding Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two.)
- A. Open Certificate Authority and automated enrollment feature.
- B. By default, integrated IDS'IPS on inside and (WAN) side interfaces.
- C. Only authorized controllers are allowed to communicate back to the vEdge router after the vEdge router establishes connections with the controllers.
- D. The vEdge routers run on hardened Linux operating systems.
- E. In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.
Answer: C,E
NEW QUESTION # 147
When designing interdomain multicast, which two protocols are deployed to achieve communication between multicast sources and receivers? (Choose two.)
- A. MSDP
- B. BIDIR-PIM
- C. MLD
- D. MP-BGP
- E. IGMPv2
Answer: A,C
NEW QUESTION # 148
How would Cisco ISE handle authentication for your printer that does not have a supplicant?
- A. ISE would not authenticate the printer as printers are not subject to ISE authentication
- B. ISE would authenticate the printer using MAB
- C. ISE would authenticate the printer using 802.1X authentication
- D. ISE would authenticate the printer using web authentication
- E. ISE would authenticate the printer using MAC RADIUS authentication
Answer: B
NEW QUESTION # 149
An engineer is designing a multicast network for a financial application Most of the multicast sources also receive multicast traffic (many-to-many deployment model). To better routing tables, the design must not use source trees.
Which multicast protocol satisfies these requirements?
- A. PIM-SM
- B. MSDP
- C. PIM-SSM
- D. BIRDIR-PIM
Answer: D
Explanation:
Bidir-PIM is designed to be used for many-to-many applications within individual PIM domains.
Multicast groups in bidirectional PIM mode can scale to an arbitrary number of sources without incurring overhead due to the number of sources.
NEW QUESTION # 150
Refer to the exhibit. A customer needs to apply QoS to the network management traffic passing through the GigabitEthernet0/2 interface. All eight queuing classes are in use, so the new requirement must be integrated into the existing policy. Which solution must the customer choose?
- A. Mark the traffic to DSCP CS6 and assign it to the ROUTING class. Then, prioritize traffic within the class.
- B. Mark the traffic to DSCP CS2 and assign it to the ROUTING class. Then, baseline existing queue sizes to determine if additional bandwidth can be provisioned to the ROUTING class
- C. Mark traffic to DSCP CS5 and assign it to the SIGNALLING class. Then, baseline existing queue sizes to determine if additional bandwidth can be provisioned to the SIGNALLING class.
- D. Mark the traffic to DSCP CS4 and assign it to the SIGNALLING class. Then, prioritize traffic within the class.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/hcs/12_5/HCS_Solution/SRND/HCS_12_
5_SRND/chcs_m_quality-of-service-considerations.pdf
NEW QUESTION # 151
An engineer is designing an enterprise campus network. The LAN infrastructure consists of switches from multiple vendors, and Spanning Tree must be used as a Layer 2 loop prevention mechanism. All configured VLANs must be grouped in two SIP instances. Which standards-based Spanning Tree technology supports this design solution?
- A. MSTP
- B. Rapid PVST
- C. STP
- D. RSTP
Answer: A
NEW QUESTION # 152
Which control-plane technology allows the same subnet to exist across multiple network locations?
- A. ISE mobility services
- B. VXLAN
- C. FabricPath
- D. LISP
Answer: B
NEW QUESTION # 153
Refer to the exhibit. An architect is designing a Layer 2 network for a customer. The network will use the spanning-tree protocol. During a link failure between SW1 and SW2, the fastest possible convergence time is desired. Which solution must the architect select?
- A. Loop Guard
- B. UplinkFast
- C. PortFast
- D. BackboneFast
Answer: B
NEW QUESTION # 154
Refer to the exhibit.
An architect must design an IPv6 migration solution for an enterprise customer to support these requirements:
* Clients will transition to the new IPv6 network, which provides NAT64 and IPv6 DNS resolution services, using the same DNS name that points to the IPv4 address.
* The service provider will create a client-facing IPv6 interface with a new IPv6 virtual address that points to the same IPv4 DNS server.
* The service provider will support clients that use global IPv6 addresses and encapsulate IPv4 packets into IPv6 tunnels.
Which two migration solutions must the architect choose? (Choose two.)
- A. Use NAT44/64 from the MPLS network to the IGR.
- B. Use dual-stack lite from the devices to the core MPLS network.
- C. Use NAT44/64 from the devices to the core MPLS network.
- D. Use IPv6 tunneling from the devices to the core MPLS network.
- E. Use dual-stack lite from the MPLS network to the IGR.
Answer: A,B
NEW QUESTION # 155
An engineer is designing a BGP solution supporting a VXLAN environment over a Layer 3 IPv4 network fabric with these requirements:
- provide Layer 2 adjacency
- allow VM migration of workloads between sites
- IGP is OSPF
Which BGP address family must the engineer choose?
- A. IPv4 unicast
- B. L2VPN EVPN
- C. VPNv4
- D. L2VPN VPLS-VPWS
Answer: B
NEW QUESTION # 156
Drag and drop the model driven telemetry characteristics from the left onto the mode they belong to on the right.
Answer:
Explanation:
Explanation
Graphical user interface, diagram Description automatically generated with medium confidence
NEW QUESTION # 157
Which queuing structure is used on SD-WAN Edge routers?
- A. FIFO
- B. 1P-4Q-2T
- C. Priority
- D. LLQ+WFQ
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/qos/vEdge-20-x/qos-book/forwarding-qos.html On Cisco vEdge devices and Cisco IOS XE SD-WAN devices, each interface has eight queues, which are numbered 0 to 7. Queue 0 is reserved, and is used for both control traffic and low-latency queuing (LLQ) traffic. For LLQ, any class that is mapped to queue 0 must also be configured to use LLQ. Queues 1 to 7 are available for data traffic, and the default scheduling for these seven queues is weighted round-robin (WRR). For these queues, you can define the weighting according to the needs of your network. When QoS is not configured for data traffic, queue 2 is the default queue.
NEW QUESTION # 158
An engineer must design a large Layer 2 domain that contains hundreds of switches and VLANs.
The engineer's primary goals are to:
- Efficiently utilize the bandwidth of all links
- Avoid Layer 2 loops
- Cause minimal impact on switch CPU and memory
Which technology should the engineer include in the design?
- A. RSTP
- B. Rapid PVST+
- C. MST
- D. PVST+
Answer: C
Explanation:
MST groups a large amount of VLANS into single instances which lower the amount of CPU and memory utilization.
https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/24248-
147.html#mst
NEW QUESTION # 159
Which two routing protocols allow for unequal cost load balancing? (Choose two.)
- A. BGP
- B. OSPF
- C. EIGRP
- D. RIPng
- E. IS-IS
Answer: A,C
Explanation:
Section: Advanced Addressing and Routing Solutions
NEW QUESTION # 160
A network engineer prepares a script to configure a loopback interface with IP address 172.16.15.12/32. To comply with the company security policies, 'Content-type':
'application/yang-data+json' is added to the script. Connection to the network devices must be secured.
Which code snippet must the network engineer use to meet this requirement?
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: A
NEW QUESTION # 161 
Refer to the exhibit. A customer needs to apply QoS to the network management traffic passing through the GigabitEthernet0/2 interface. All eight queuing classes are in use, so the new requirement must be integrated into the existing policy. Which solution must the customer choose?
- A. Mark the traffic to DSCP CS2 and assign it to the ROUTING class Then, baseline existing queue sizes to determine if additional bandwidth can be provisioned to the ROUTING class
- B. Mark traffic to DSCP CS5 and assign it to the SIGNALLING class. Then, baseline existing queue sizes to determine if additional bandwidth can be provisioned to the SIGNALLING class.
- C. Mark the traffic to DSCP CS4 and assign it to the SIGNALLING class. Then, prioritize traffic within the class.
- D. Mark the traffic to DSCP CS6 and assign it to the ROUTING class Then, prioritize traffic within the class.
Answer: A
NEW QUESTION # 162
Which consideration must be made when designing a Cisco SD-Access fabric underlay?
- A. A unified policy must be used.
- B. The default MTU should be increased.
- C. Up to six control planes are supported.
- D. Subnets must be reduced to decrease latency.
Answer: B
Explanation:
VXLAN adds 50 bytes to the original packet. The common denominator and recommended MTU value available on devices operating in a fabric role is 9100. Network should have a minimum starting MTU of at least 1550 bytes to support the fabric overlay. MTU values between 1550 and
9100 are supported along with MTU values larger than 9100 though there may be additional configuration and limitations based on the original packet size.
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html
NEW QUESTION # 163
Which statement describes what happens if all VSL connections between the virtual switch members are lost?
- A. Both virtual switch members cease to forward traffic.
- B. The VSS transitions to the dual active recovery mode, and both virtual switch members continue to forward traffic independently.
- C. The VSS transitions to the dual active recovery mode, and only the new active virtual switch continues to forward traffic.
- D. The virtual switch members reload.
Answer: C
Explanation:
Q. What happens if all VSL connections between the virtual switch members are lost?
A. VSLs can be configured with up to eight links between the two switches across any combination of line cards or supervisor ports to provide a high level of redundancy. If for some rare reason all VSL connections are lost between the virtual switch members leaving both the virtual switch members up, the VSS will transition to the dual active recovery mode.
The dual active state is detected rapidly (subsecond) by any of the following three methods:
Enhancement to PagP used in MEC with connecting Cisco switches
L3 Bidirectional Forwarding Detection (BFD) configuration on a directly connected link (besides VSL) between virtual switch members or through an L2 link through an access layer switch L2 Fast-Hello Dual-Active Detection configuration on a directly connected link (besides VSL) between virtual switch members (supported with 12.2(33)SXI) In the dual active recovery mode, all interfaces except the VSL interfaces are in an operationally shut down state in the formerly active virtual switch member. The new active virtual switch continues to forward traffic on all links.
Reference: http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps9336/ prod_qas0900aecd806ed74b.html
NEW QUESTION # 164
......
Focus on 300-420 All-in-One Exam Guide For Quick Preparation: https://www.easy4engine.com/300-420-test-engine.html
Tested Material Used To 300-420: https://drive.google.com/open?id=17tgdSme0LiZ48S4OvLF8g2Vha24rlwTi
